117.66.149.215

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
117.66.149.229	attackspam	Dec 8 09:52:42 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:52:52 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:53:00 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:53:12 esmtp postfix/smtpd[12184]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:53:20 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.66.149.229	2019-12-09 03:08:50

Type

Details

Datetime

117.66.149.229

attackspam

Dec  8 09:52:42 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:52:52 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:53:00 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:53:12 esmtp postfix/smtpd[12184]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:53:20 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.66.149.229

2019-12-09 03:08:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.66.149.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25931
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.66.149.215.			IN	A

;; AUTHORITY SECTION:
.			351	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 22:07:29 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 215.149.66.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 215.149.66.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
181.48.67.89	attackbotsspam	prod11 ...	2020-04-29 19:08:48
5.14.123.196	attackbots	Apr 29 00:52:22 ws22vmsma01 sshd[21936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.14.123.196 ...	2020-04-29 19:09:45
222.186.15.18	attackbots	Apr 29 11:32:56 localhost sshd[121860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Apr 29 11:32:58 localhost sshd[121860]: Failed password for root from 222.186.15.18 port 15083 ssh2 Apr 29 11:33:00 localhost sshd[121860]: Failed password for root from 222.186.15.18 port 15083 ssh2 Apr 29 11:32:56 localhost sshd[121860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Apr 29 11:32:58 localhost sshd[121860]: Failed password for root from 222.186.15.18 port 15083 ssh2 Apr 29 11:33:00 localhost sshd[121860]: Failed password for root from 222.186.15.18 port 15083 ssh2 Apr 29 11:32:56 localhost sshd[121860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18 user=root Apr 29 11:32:58 localhost sshd[121860]: Failed password for root from 222.186.15.18 port 15083 ssh2 Apr 29 11:33:00 localhost sshd[121860]: F ...	2020-04-29 19:43:37
83.12.171.68	attackbots	$f2bV_matches	2020-04-29 19:46:06
45.236.39.195	attack	Brute force attempt	2020-04-29 19:37:51
5.39.75.36	attackspambots	DATE:2020-04-29 13:10:49,IP:5.39.75.36,MATCHES:10,PORT:ssh	2020-04-29 19:15:51
125.165.112.149	attack	DATE:2020-04-29 05:51:51, IP:125.165.112.149, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-04-29 19:30:27
82.64.32.76	attack	Invalid user planning from 82.64.32.76 port 35816	2020-04-29 19:17:09
183.89.212.197	attackbotsspam	(imapd) Failed IMAP login from 183.89.212.197 (TH/Thailand/mx-ll-183.89.212-197.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 10:41:28 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=183.89.212.197, lip=5.63.12.44, TLS, session=	2020-04-29 19:24:23
1.0.162.120	attack	DATE:2020-04-29 05:51:36, IP:1.0.162.120, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-04-29 19:43:08
187.190.227.18	attack	Dovecot Invalid User Login Attempt.	2020-04-29 19:44:49
103.4.65.78	attackbots	" "	2020-04-29 19:34:13
182.50.135.72	attackbots	Automatic report - XMLRPC Attack	2020-04-29 19:39:37
67.213.75.130	attackbots	[Aegis] @ 2019-07-02 05:36:38 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2020-04-29 19:21:00
202.69.35.166	attackspam	FTP	2020-04-29 19:27:31

Recently Reported IPs

117.66.149.197	117.66.149.218	117.66.149.217	117.66.149.22
117.66.149.225	114.229.33.182	117.66.149.200	117.66.149.202
117.66.149.21	117.66.149.222	117.66.149.220	117.66.149.240
117.66.149.199	117.66.149.227	117.66.149.252	117.66.149.253
117.66.149.34	114.229.35.96	117.66.149.45	117.66.149.57